
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
File: ZePmyEfHm7BarCTUF4F41vfARIU.mft (raw, json)
Hash identifier: kHTOh6/xHpO40Tq4eFmJMRKkoz6h4WDfQzXv44txdjI=
Subject key identifier: B8:49:AB:95:05:35:83:1F:B9:FE:20:6E:F0:E7:42:3D:9D:EA:FE:43
Authority key identifier: 65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
Certificate issuer: /CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Certificate serial: 01987CE571D8018D31E0A03FF1FB87677771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
Manifest number: 02B9
Signing time: Wed 06 Aug 2025 01:01:08 +0000
Manifest this update: Wed 06 Aug 2025 01:01:08 +0000
Manifest next update: Thu 07 Aug 2025 01:01:08 +0000
Files and hashes: 1: ZePmyEfHm7BarCTUF4F41vfARIU.crl (hash: N6u84AnIwEafE+gHssMYWlOAMXg6w4KlJXryzwJRtWQ=)
2: _G6b2YObaO8vXwxmRAdxtdM520E.roa (hash: 1ZvsYB4M9L/iBBRu/0d0SPNVtbn8DNDppTZnbpT7L4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:71:d8:01:8d:31:e0:a0:3f:f1:fb:87:67:77:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Validity
Not Before: Aug 6 01:01:08 2025 GMT
Not After : Aug 7 01:01:08 2025 GMT
Subject: CN=b849ab950535831fb9fe206ef0e7423d9deafe43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:b9:c8:ca:19:be:b6:2c:fe:f6:b7:f2:3f:
a6:6a:0d:9e:47:fc:4a:9b:f3:7f:a9:50:2b:f9:5d:
9c:35:7c:76:c1:34:21:f9:40:5c:d8:ce:0a:02:2b:
d8:df:55:41:fe:91:16:77:74:38:c7:64:e2:7e:22:
62:8d:d8:ee:e9:13:b3:2b:6d:bf:ce:0b:41:63:f8:
b4:1b:9b:f9:05:c2:50:64:dd:c3:79:cf:d8:c3:17:
0e:e4:d8:24:52:f9:ef:58:85:ba:d8:6c:ee:ad:68:
76:0d:52:c9:06:54:a1:26:d8:d5:a8:c6:a4:78:e0:
d9:6b:3d:c2:20:ec:4c:b8:f0:51:0c:91:8d:d2:80:
98:01:31:02:4f:1b:08:89:fd:56:91:4d:0f:52:9b:
a0:a2:7f:79:00:f4:f5:0f:0b:9d:96:68:80:d2:80:
0d:bb:ab:3a:22:28:79:65:0a:ea:42:5f:79:5c:fb:
57:ae:04:7b:7c:93:4c:49:61:5c:e5:ec:ae:40:3d:
ac:9a:8b:69:f3:82:ec:d0:ad:c8:d6:c9:fb:58:b8:
f7:a6:b6:2a:3c:df:f5:54:3e:3b:b4:28:6a:16:6f:
0d:e4:82:00:c7:8f:a1:78:ba:72:75:f5:67:9e:a3:
13:15:fa:4d:94:e5:63:72:95:54:1d:26:22:17:b8:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:AB:95:05:35:83:1F:B9:FE:20:6E:F0:E7:42:3D:9D:EA:FE:43
X509v3 Authority Key Identifier:
keyid:65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:15:7a:0e:6a:b0:77:04:57:d2:0e:b7:29:ed:54:0f:3e:5f:
49:0f:07:70:34:96:a3:c6:4d:95:65:ae:d3:ed:b7:9c:7b:ea:
aa:6b:0b:cc:d3:5b:78:45:68:3a:51:dd:b8:2e:11:c0:b3:8d:
03:2f:2b:1e:28:ce:dc:ca:07:77:b0:9a:fb:8f:c6:99:8b:f2:
db:b6:48:d7:6a:4c:45:ee:73:d3:30:f4:54:b9:97:7d:7d:85:
b5:92:eb:ef:55:c8:89:e0:74:cf:48:2b:07:f8:4c:91:71:a4:
2b:86:78:f2:67:fe:66:5a:3e:94:5e:cc:18:81:cf:bf:42:c0:
e0:a9:f2:c2:a3:c9:d1:f8:b4:91:f6:c0:47:c8:aa:f0:bf:70:
c0:07:35:05:e4:4b:1e:6c:9c:ad:ea:d8:34:c1:9d:86:2d:1d:
91:56:7f:0b:9e:c1:38:b3:b3:02:9e:3b:2f:5f:42:dd:d0:f7:
53:66:0a:ba:0b:78:51:ca:f1:30:87:98:38:e3:04:62:11:19:
37:5b:6f:8a:c9:98:4d:a4:06:13:15:05:40:31:68:7a:62:35:
47:6f:3d:1e:bc:a7:04:b0:c8:e5:08:1d:a8:2c:4e:9a:45:76:
97:43:fd:03:2a:dc:6b:85:9c:da:78:35:63:56:e4:ca:5d:88:
0b:51:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:45 2025 by rpki-client